I'm more concerned about his having a secure, patched server and his website having no vulnerabilities. Non-idiotic passwords are hard to guess; SQL injection

I'm more concerned about his having a secure, patched server and his website having no vulnerabilities. Non-idiotic passwords are hard to guess; SQL injection is easy.